Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: UIsDmqaXpxmBCfdzpMKmslpkrzkqpokLU6zhWQKpFiE=
Subject key identifier: D5:85:E5:3C:4E:19:67:D8:7F:07:39:00:1E:AF:49:B2:AB:53:F3:DC
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 0198D5F178497E0E0A8BCE0F959891E3D53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 02EF
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: IvIRPRrpk/e+BnxG/coOuNgtIPsTQmL6/roIAxOrW1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:49:7e:0e:0a:8b:ce:0f:95:98:91:e3:d5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=d585e53c4e1967d87f0739001eaf49b2ab53f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:1f:c7:62:00:33:37:3a:42:ef:62:33:b3:
4e:24:cf:e9:06:d3:76:36:81:e0:14:7e:3c:22:6b:
1e:05:99:c1:2b:75:4b:29:6e:24:97:36:36:22:36:
e0:1a:d3:2f:54:97:ba:38:63:70:61:37:9b:cc:98:
14:7b:95:4b:a9:9d:9c:86:c1:15:d8:36:13:66:ea:
b5:e9:b3:7c:49:7c:95:79:5f:ed:c2:19:a3:d1:ed:
bc:6e:b1:e5:1c:b5:0f:3e:b1:ae:f3:b3:a4:53:87:
5d:f9:ed:f9:4d:a1:f8:9d:c4:75:8e:42:17:24:56:
41:39:03:1e:f6:be:ba:70:1a:04:b9:ef:91:9a:b7:
3f:59:7d:1a:44:d7:19:da:1c:f8:fd:e9:99:f6:cc:
3b:6f:81:61:b2:43:ef:c9:86:b5:b4:a2:b3:86:ac:
78:a5:20:99:74:c7:4b:57:c9:d1:60:a9:d1:d8:6e:
c7:71:cf:91:d5:22:4f:83:ba:a9:6f:97:5c:85:a0:
7d:94:3f:1c:73:b8:f0:eb:4e:c8:9d:e1:85:7a:7f:
e1:f0:92:c4:f1:eb:a3:bd:fd:4d:e9:f5:34:8c:9f:
0d:75:cf:93:dd:35:b0:7e:2e:b5:2e:da:d6:a3:ce:
37:27:6b:e9:e3:17:d9:96:78:a7:29:a9:9d:ee:b0:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:E5:3C:4E:19:67:D8:7F:07:39:00:1E:AF:49:B2:AB:53:F3:DC
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:c2:8d:a0:29:27:9c:3c:ff:0b:3b:51:32:17:2b:31:9f:
ab:4f:0a:22:11:0f:45:e6:b5:49:ba:64:cb:54:46:62:56:7d:
a7:58:87:78:16:f1:89:5f:67:04:56:2d:92:df:3d:8e:a1:2f:
d9:8a:35:7a:a5:3e:c8:28:03:39:6a:40:0e:08:2e:d6:8f:ad:
6d:6f:f5:7e:fe:bd:8a:85:07:55:48:72:29:30:c0:c6:45:2e:
ad:c4:3e:33:70:9b:e8:bd:c1:1b:09:dc:b3:9a:8e:c2:ff:59:
53:6a:b0:18:df:90:c9:9e:04:28:07:68:42:02:3b:9c:9e:fe:
8a:b6:5f:83:c2:aa:14:f9:af:75:45:9d:13:f7:98:75:2c:f9:
64:86:0d:44:a1:96:18:d9:f5:2b:89:85:20:23:00:eb:28:f2:
88:6c:68:59:9b:74:0f:16:3a:76:2a:6b:2a:47:1f:b2:b0:d4:
70:8e:fd:b4:c7:53:3c:cf:cf:8f:41:ec:dc:ad:16:62:2f:aa:
b3:19:f7:6b:ee:01:5c:2a:d5:ff:17:ab:e9:94:b0:33:08:13:
18:1c:07:96:5f:62:b9:c0:83:3e:f7:2e:b6:cc:e3:9d:42:c0:
32:f1:5c:08:14:a1:b8:90:96:99:07:6f:fd:ff:25:27:76:e5:
e9:9d:7c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XhJfg4Ki84PlZiR49U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm
MTllZTAwHhcNMjUwODIzMDgwMDI4WhcNMjUwODI0MDgwMDI4WjAzMTEwLwYDVQQD
EyhkNTg1ZTUzYzRlMTk2N2Q4N2YwNzM5MDAxZWFmNDliMmFiNTNmM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEfx2IAMzc6Qu9iM7NOJM/pBtN2
NoHgFH48ImseBZnBK3VLKW4klzY2IjbgGtMvVJe6OGNwYTebzJgUe5VLqZ2chsEV
2DYTZuq16bN8SXyVeV/twhmj0e28brHlHLUPPrGu87OkU4dd+e35TaH4ncR1jkIX
JFZBOQMe9r66cBoEue+Rmrc/WX0aRNcZ2hz4/emZ9sw7b4FhskPvyYa1tKKzhqx4
pSCZdMdLV8nRYKnR2G7Hcc+R1SJPg7qpb5dchaB9lD8cc7jw607IneGFen/h8JLE
8eujvf1N6fU0jJ8Ndc+T3TWwfi61LtrWo843J2vp4xfZlninKamd7rCXJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWF5TxOGWfYfwc5AB6vSbKrU/PcMB8GA1UdIwQY
MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt
NDM2MGVlMDZhMjJjLzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj
LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrrCjaAp
J5w8/ws7UTIXKzGfq08KIhEPRea1Sbpky1RGYlZ9p1iHeBbxiV9nBFYtkt89jqEv
2Yo1eqU+yCgDOWpADggu1o+tbW/1fv69ioUHVUhyKTDAxkUurcQ+M3Cb6L3BGwnc
s5qOwv9ZU2qwGN+QyZ4EKAdoQgI7nJ7+irZfg8KqFPmvdUWdE/eYdSz5ZIYNRKGW
GNn1K4mFICMA6yjyiGxoWZt0DxY6diprKkcfsrDUcI79tMdTPM/Pj0Hs3K0WYi+q
sxn3a+4BXCrV/xer6ZSwMwgTGBwHll9iucCDPvcutszjnULAMvFcCBShuJCWmQdv
/f8lJ3bl6Z18zQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:04 2025 by rpki-client